Legal and Privacy policy

Privacy and Legal Policy

Effective Date: 21/05/2025

This website is operated and owned by Students Organising for Sustainability (SOS-UK) in collaboration with Center for Data-driven Empowerment, Leadership and Advocacy (zedela) gUG (haftungsbeschränkt) for the purpose of PACE Index. We are committed to protecting your privacy and handling your personal data responsibly and transparently in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who we are

  • Lead data controller: zedela gUG (haftungsbeschränkt)Großgörschenstraße 27, 10829 Berlin, Germany
    Data Protection Officer: Mr. Alexander Hönsch, LL.B., WS Datenschutz GmbH
    Contact: zedela@ws-datenschutz.de
  • Joint controller (collaborative role): Students Organising for Sustainability (SOS-UK)c/o NUS Charity, Merseyway Innovation Centre, 21–23 Merseyway, Stockport, SK1 1PN, UK
    Data Protection Contacts: Rachel Drayson or Joanna Romanowicz
    Primary Contact: zedela@ws-datenschutz.de

2. What data we collect

When you engage with our site and register for PACE Index, we may collect the following personal information:

  • Your name
  • Email address
  • Organisation name
  • Role/position in your organisation

This data is collected via our registration form hosted on Tally.so.

3. Purpose and legal basis for processing

Your data will be processed to keep you informed about PACE Index and related communications.

  • Legal basis: Your consent under Article 6(1)(a) GDPR.
    You may withdraw your consent at any time by contacting us.

4. How we use your data

Your data will be used solely for:

  • Email communications and updates on PACE Index
  • Coordinated campaign efforts between zedela and SOS-UK
  • Administrative and analytical purposes to improve our services

We will not sell or share your data with third parties beyond the services listed below without your explicit consent.

5. Third-party data processors

Data may be shared with trusted providers under GDPR-compliant data processing agreements:

Tally.so – registration and survey tool

Notion – internal database management

Action Network – email/newsletter communication

6. Cookies and website tracking

This website uses cookies to enhance your experience. Cookies are small files stored on your device to collect data on your usage of the site.

  • Session cookies are used to track activity and are deleted after your visit.
  • Persistent cookies help us remember your preferences for future visits.
  • Third-party analytics cookies may be used to monitor site traffic and engagement.

You can manage cookie preferences through your browser settings. For more information, visit www.aboutcookies.org

7. Data retention

Your data will be retained until the conclusion of the PACE Index campaign in 2027, or until you request deletion, whichever comes first—unless legal retention obligations apply.

8. Your rights under GDPR

Under Articles 15–22 GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure of your data
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

To exercise any of these rights, please contact: zedela@ws-datenschutz.de

9. Security measures

We implement appropriate technical and organisational security measures to protect your data from loss, misuse, or unauthorised access. This includes:

  • Encrypted communication and data storage
  • Limited access controls
  • Identity verification for sensitive data requests

10. External links and third parties

Our website may contain links to external sites. Please note we are not responsible for the privacy practices of other websites. We encourage you to read their policies before providing personal information.

11. Contact and complaints

If you have any concerns or questions about this policy or how your data is used, please contact:

hello@sos-uk.org or zedela@ws-datenschutz.de

You also have the right to lodge a complaint with:

  • Germany: Berliner Beauftragte für Datenschutz und Informationsfreiheit
  • UK: Information Commissioner's Office (ICO)

This policy may be updated periodically. Please review it regularly for changes.